$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS9922.roa File: AS9922.roa (raw, json) Hash identifier: TLPvn/desxVF2+80H45wFLAveMbDROKTieBWGq2H5p4= Subject key identifier: D6:C9:D4:D3:32:30:83:09:74:1C:21:DE:5B:C7:72:01:87:48:2D:5A Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 388E8612FE45D9D6B8A106AE12E7905B6F377DA4 Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS9922.roa Signing time: Tue 12 May 2026 01:49:10 +0000 ROA not before: Tue 12 May 2026 01:44:10 +0000 ROA not after: Tue 11 May 2027 01:49:10 +0000 asID: 9922 IP address blocks: 61.61.4.0/23 maxlen: 24 61.61.76.0/22 maxlen: 24 61.61.80.0/20 maxlen: 24 61.61.152.0/22 maxlen: 24 61.61.164.0/22 maxlen: 24 106.105.8.0/21 maxlen: 24 122.147.24.0/21 maxlen: 24 203.190.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8e:86:12:fe:45:d9:d6:b8:a1:06:ae:12:e7:90:5b:6f:37:7d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: May 12 01:44:10 2026 GMT Not After : May 11 01:49:10 2027 GMT Subject: CN=D6C9D4D332308309741C21DE5BC7720187482D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:4f:53:93:d8:37:c6:2c:78:e6:2e:bd:0a: db:34:ee:dd:f6:f8:77:91:93:8a:28:66:e5:24:7c: 1a:aa:e2:d5:bc:41:ac:a4:8b:1b:64:9c:3b:11:3b: 4a:ac:94:61:cb:30:99:af:51:d8:b0:26:d4:8b:da: 15:b3:e0:50:36:54:e7:42:f0:58:78:5f:cc:ce:1b: 7d:56:1a:84:9b:c7:b4:59:6c:ea:62:8c:ce:1d:9c: 66:6e:b8:66:1a:af:50:49:31:37:18:a9:f1:6b:74: 6e:30:a5:a9:2f:52:c5:c2:e2:55:68:15:bf:65:bb: 98:c0:f1:33:7e:b1:87:69:b2:75:20:98:9f:3f:75: ca:18:24:27:71:bd:3a:6a:79:50:56:01:e2:8f:fe: 0e:95:4c:12:eb:de:81:5f:44:16:6e:79:54:8c:97: 82:94:4c:b9:c6:1a:d3:e8:b7:75:aa:35:d4:d7:02: 1a:b0:0b:3a:a4:a6:79:f3:f6:39:6e:53:b5:47:ce: 0c:2c:30:30:8e:68:5e:a1:ee:64:e8:3e:48:8b:be: d2:56:3f:30:ac:4a:96:fc:47:92:db:04:36:50:4b: 7e:78:38:50:48:88:53:f1:ac:62:78:05:5b:d1:62: 04:ed:07:cf:20:e1:44:96:73:ce:84:75:83:ea:96: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C9:D4:D3:32:30:83:09:74:1C:21:DE:5B:C7:72:01:87:48:2D:5A X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS9922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.61.4.0/23 61.61.76.0-61.61.95.255 61.61.152.0/22 61.61.164.0/22 106.105.8.0/21 122.147.24.0/21 203.190.16.0/21 Signature Algorithm: sha256WithRSAEncryption 5f:bf:d9:65:75:e7:87:af:31:86:51:d9:23:4a:46:a0:c0:93: a7:3f:68:29:b7:51:0f:5a:9d:8d:23:f8:9b:c7:a9:ee:78:31: cb:02:49:20:74:26:56:bc:f9:0e:ad:4d:4c:c7:4e:80:50:e0: 5a:19:ae:bd:7c:0f:ae:81:b0:b5:00:29:dd:fb:33:7f:a7:b5: 3c:c1:95:14:7d:8c:68:c9:88:84:e6:e9:8c:36:af:46:d1:a3: ba:66:3a:4d:38:fc:60:01:d5:77:d9:92:0d:2e:d9:1d:08:f0: ad:b9:d8:b7:b4:bf:4e:c3:46:c9:dc:18:d0:a9:82:6d:3f:02: 5c:16:9e:be:bc:90:30:f7:37:93:c2:76:48:0c:e5:bf:01:ca: fa:06:34:fe:a6:90:a4:78:a8:36:3c:93:d5:e9:f9:d3:54:34: 42:f9:c4:d9:9d:9e:6b:aa:4e:a8:ed:93:f9:e1:bc:83:d3:15: 2d:b9:bf:25:ce:ef:86:1a:47:6f:e0:83:09:ed:dc:ab:e6:f5: a7:ba:16:28:46:c2:47:52:f4:29:48:72:26:b0:d0:58:8f:19: 5d:44:62:9f:c8:6e:e2:17:87:9d:0b:80:48:86:00:ce:b0:db: c9:02:7d:f6:d3:e7:94:78:ec:28:71:01:e4:bd:67:e8:22:2d: 3d:13:d1:8a -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUOI6GEv5F2da4oQauEueQW283faQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjA1MTIwMTQ0MTBaFw0yNzA1MTEwMTQ5MTBaMDMxMTAvBgNV BAMTKEQ2QzlENEQzMzIzMDgzMDk3NDFDMjFERTVCQzc3MjAxODc0ODJENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxh09Tk9g3xix45i69Cts07t32 +HeRk4ooZuUkfBqq4tW8QaykixtknDsRO0qslGHLMJmvUdiwJtSL2hWz4FA2VOdC 8Fh4X8zOG31WGoSbx7RZbOpijM4dnGZuuGYar1BJMTcYqfFrdG4wpakvUsXC4lVo Fb9lu5jA8TN+sYdpsnUgmJ8/dcoYJCdxvTpqeVBWAeKP/g6VTBLr3oFfRBZueVSM l4KUTLnGGtPot3WqNdTXAhqwCzqkpnnz9jluU7VHzgwsMDCOaF6h7mToPkiLvtJW PzCsSpb8R5LbBDZQS354OFBIiFPxrGJ4BVvRYgTtB88g4USWc86EdYPqlhsjAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQU1snU0zIwgwl0HCHeW8dyAYdILVowHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwSgYIKwYBBQUHAQsEPjA8MDoGCCsGAQUFBzALhi5yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzk5MjIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUHAQcBAf8EPDA6MDgEAgABMDID BAE9PQQwDAMEAj09TAMEBT09QAMEAj09mAMEAj09pAMEA2ppCAMEA3qTGAMEA8u+ EDANBgkqhkiG9w0BAQsFAAOCAQEAX7/ZZXXnh68xhlHZI0pGoMCTpz9oKbdRD1qd jSP4m8ep7ngxywJJIHQmVrz5Dq1NTMdOgFDgWhmuvXwProGwtQAp3fszf6e1PMGV FH2MaMmIhObpjDavRtGjumY6TTj8YAHVd9mSDS7ZHQjwrbnYt7S/TsNGydwY0KmC bT8CXBaevryQMPc3k8J2SAzlvwHK+gY0/qaQpHioNjyT1en501Q0QvnE2Z2ea6pO qO2T+eG8g9MVLbm/Jc7vhhpHb+CDCe3cq+b1p7oWKEbCR1L0KUhyJrDQWI8ZXURi n8hu4heHnQuASIYAzrDbyQJ99tPnlHjsKHEB5L1n6CItPRPRig== -----END CERTIFICATE-----Generated at Tue May 12 22:53:35 2026 by rpki-client